By default, all operating system (OS) vendor-provided patches are installed
using the AMS-default patch baseline. If you want to restrict which patches
are installed, you can optionally create a patch baseline using the RFC change
type Deployment | Patching | SSM patch baseline | Create OS
(CT ID varies per operating system).
For information about using these change types, see Patching subcategory.